VulnSocial

CVE-2026-82447Disclosure

LOWCVSS 8.7 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Skyvern before 1.0.45 contains a sandbox escape vulnerability in TextPromptBlock that renders prompts twice, first through a sandboxed Jinja environment and then through an unsandboxed environment. Attackers can inject malicious Jinja template syntax through workflow parameters or upstream block output to execute arbitrary code with server process privileges.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-1336

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 2 mentions (2026-08-29); latest day: 1
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-08-29: 2Mentions · 2026-08-31: 1Patch / Workaround · 2026-08-31: 1Technical Details · 2026-08-29: 2Technical Details · 2026-08-31: 108-2908-31
Signal classification2 categories
Disclosure
266.7%
Patch
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-08-292
Disclosure2
2026-08-311
Patch1
Full discourse3 posts
  • Ciberseguridad LATAM@CibersegLATAM
    Patch

    🛡️ Skyvern corrige falla de doble renderizado que permitía escape de sandbox vía templates Jinja La vulnerabilidad CVE-2026-82447 habilitaba ejecución remota de código en versiones anteriores a 1.0.45… ¿Cómo se están preparando para esto en LATAM? https://ciberseguridadlatam.com/skyvern-corrige-falla-de-doble-renderizado-que-permitia-escape-de-sandbox-via-templates-jinja/?utm_source=x&utm_medium=social&utm_campaign=skyvern-corrige-falla-de-doble&utm_content=post https://t.co/pgFZGUAFSD

    Post summary

    Skyvern has released a patch (v1.0.45) addressing CVE-2026-82447, which exploited a double-render bug to escape sandbox via Jinja templates. The update resolves the remote code execution vulnerability but no active exploitation or PoC is reported.

    01000485
    22.6K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-82447 Skyvern before 1.0.45 contains a sandbox escape vulnerability in TextPromptBlock that renders prompts twice, first through a sandboxed Jinja environment and then thro… https://www.cve.org/CVERecord?id=CVE-2026-82447 ----- Traducción: CVE-2026-82447 Sky… https://infoflow.cloud`

    Post summary

    CVE-2026-82447 is disclosed as a sandbox escape issue in Skyvern’s TextPromptBlock, with no PoC, exploit, or mitigation details provided.

    00000101
    102 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-82447 Skyvern before 1.0.45 contains a sandbox escape vulnerability in TextPromptBlock that renders prompts twice, first through a sandboxed Jinja environment and then thro… https://www.cve.org/CVERecord?id=CVE-2026-82447

    Post summary

    Skyvern before 1.0.45 contains a sandbox escape flaw in TextPromptBlock that renders prompts twice via a protected Jinja environment.

    000001.6K
    58.1K followersView on X

Explore more

Back to dashboard